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A1 



receive unauthorized datagrams with multiple 
destination addresses at a deception system 

i 



A2 



generate deception responses emulating 
different computer systems at different 
destination addresses 



A3 



return deception responses to unauthorized 

sender 



FIG. 9 



B1 



receive datagrams to multiple destinations to 
which emulation/deception responses will be 

directed 



i 



B2 



detect datagrams at two or more 
emulation/deception systems of two or more 
different types 



B3 



generate deception responses at deception 
systems so that an emulated response is 
generated by a deception system of the same 
general type as an emulated system 



84 



return deception/emulation responses 
FIG. 10 
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C1 



receive datagrams at an outside deception 
device with an original source/destination 
address indication 



C2 



perform first translation of original indication to 
an intermediate indication 



C3 



perform second translation of intermediate 
indication back to original indication and pass 
into an internal network 



i 



C4 



receive datagram at a system in internal 
network and respond on internal network 



C5 



perform reverse second translation back to 
intermediate indication 



C6 



perform reverse first translation of 
intermediate indication back to original 
source/destination address indication 



i 



C7 



forward response to initial sender 
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D1 



receive datagrams at an outside deception 
device witli an original source/destination 
address indication 



i 



D2 



perform first translation of original indication to 
an intermediate indication and route on an 
intermediate network to one or more internal 
subnetworks 



i 



D3 



detect datagram on appropriate intermediate 
network device and perform second 
translation of intermediate indication to an 
internal address indication and pass into an 
internal network 



i 



D4 



respond to datagram on an internal network 



D5 



perform reverse second translation back to 
intermediate indication an place on 
intermediate network 



i 



D6 



perform reverse first translation of 
intermediate indication back to original 
source/destination address indication 



D7 



forward response to initial sender 
FIG. 12 
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E1 



receive datagram at first translating node and 
perform first translation of original 
source/destination address indication to a 
second address indication 



i 



E2 



forward datagram to a second translating 
node indicated by the second address 
indication 



i 



E3 



receive datagram at second translating node 
and perform second translation of address 
indication towards a final translating address 

indication 



E4 



forward datagram to a final translating node 
indicated by a final address indication 



E5 



receive datagram at final translating node and 
translate to actual desired destination address 



i 



E6 



forward datagram to actual desired destination 
address with obscured source 



E7 



forward response to initial sender 
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F1 



at a first MIMD processing module, transmit 
datagrams to otiier processing modules using 
a local MIMD addressing scheme 
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F2 



at a first address translation module, detecting 
datagrams transmitted using the first local 
MIMD address scheme that are directed to 
processing modules not locally present 



F3 



at the first address translation module, 
translating detected datagrams to an 
intermediate network address of a second 
address translation module 



F4 



transmitting the translated datagram over an 
intermediate network to the second address 
translation module 



F5 



at the second address translation module, 
translating datagrams from an intermediate 

network address to a second MIMD 
addressing scheme 



i 



F6 



transmitting the multiply translated datagram 
to the appropriate MIMD processing module 

FIG. 14 



